A sophisticated cyber espionage campaign by threat actor REF7707 targeted a South American Foreign Ministry, along with telecommunications and educational institutions in Southeast Asia. The attack utilized custom malware components PATHLOADER and FINALDRAFT, featuring advanced capabilitie...
North Korean hacking group Kimsuky has adopted a new social engineering tactic targeting international organizations. Posing as South Korean officials, hackers send spear-phishing emails with PDF attachments that redirect victims to fake registration pages, tricking them into executing mal...
International law enforcement agencies arrested two Russian nationals in Thailand connected to the Phobos ransomware operation, which targeted over 1,000 victims and collected $16M in Bitcoin. The operation, dubbed "Phobos Aetor," also dismantled the 8Base ransomware infrastructure and inv...
Critical security flaw discovered in Contec CMS8000 patient monitoring devices reveals backdoor secretly transmitting patient data to Chinese IP address. The vulnerability allows unauthorized remote access and system control, affecting both Contec and rebranded Epsimed devices. CISA warns ...
North Korean Lazarus Group has deployed a sophisticated web-based admin platform for managing command-and-control operations in Operation Phantom Circuit, a supply chain attack targeting cryptocurrency sector and developers. Using React frontend and Node.js backend, the system manages 1,63...
